wpdevelop Booking Calendar vulnerabilities

CVEs per yearBy the year they were published

1. 20172
2. 20221
3. 20244
4. 20257
5. 202612

Newest CVEs

• CVE-2026-18496

  Booking Calendar <= 11.4.3 - Unauthenticated Sensitive Information Exposure in 'WPBC_FLEXTIMELINE_NAV' AJAX Action

  wpdevelop · Booking Calendar

  Medium5.3
• CVE-2026-39601

  WordPress Booking Calendar plugin <= 11.8.4 - Race Condition vulnerability

  WPdevelop · Booking Calendar

  Low3.7
• CVE-2026-93655

  Booking Calendar <= 11.8.3 - Reflected Cross-Site Scripting via 'wpbc_auto_fill' Parameter

  wpdevelop · Booking Calendar

  Medium6.1
• CVE-2026-92561

  Booking Calendar <= 11.8.2 - Reflected Cross-Site Scripting via 'options' Parameter

  wpdevelop · Booking Calendar

  Medium6.1
• CVE-2026-92619

  Booking Calendar <= 11.8.2 - Authenticated (Editor+) Privilege Escalation to 'data_name' Parameter

  wpdevelop · Booking Calendar

  High7.2
• CVE-2026-74002

  WordPress Booking Calendar plugin <= 11.7 - Broken Access Control vulnerability

  wpdevelop · Booking Calendar

  Medium5.3
• CVE-2026-59558

  WordPress Booking Calendar plugin <= 11.4.2 - Cross Site Scripting (XSS) vulnerability

  wpdevelop · Booking Calendar

  High7.1
• CVE-2026-32358

  WordPress Booking Calendar plugin <= 10.14.15 - SQL Injection vulnerability

  wpdevelop · Booking Calendar

  High7.6
• CVE-2026-2230

  Booking Calendar <= 10.14.14 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary User Settings Modification

  wpdevelop · Booking Calendar

  Medium4.3
• CVE-2026-1431

  Booking Calendar <= 10.14.13 - Missing Authorization to Unauthenticated Booking Details Exposure

  wpdevelop · Booking Calendar

  Medium5.3